The following is a general comparison of OTP applications that are used to generate one-time passwords for two-factor authentication (2FA) systems using the time-based one-time password (TOTP) or the HMAC-based one-time password (HOTP) algorithms.
Authenticated implementations
editImplementation | Description | Online sync. | Operating system / Platform | Non-default | ||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Windows | Mac | Linux | iOS | Android | J2ME | Other | Value length, d | Hash, H | Interval, TX | Epoch, T0 | Steam | |||
Aegis Authenticator | Free and open source app for Android to manage your 2-step verification tokens.[1] | Automatic backup to a location of your choosing | No | No | No | No | Yes | No | No | Yes | Yes | No | Yes | Yes |
Apple Keychain | Native password manager on Apple devices. Not on tvOS.[2] | Yes [3] | Yes [4] | Yes | No | Yes | No | No | Apple Vision Pro | Unknown | Unknown | Unknown | Unknown | Unknown |
Bitwarden | Open Source Cross platform password manager. 2FA is a premium feature.[5] | Yes | Yes | Yes | Yes | Yes | Yes | No | No | Yes | Yes | Yes | Unknown | Yes[6] |
Bitwarden Authenticator | Free and open source app for Android and iOS to manage your 2-step verification tokens.[7] | No | No | No | No | Yes | Yes | No | No | No | No | No | No | No |
SAASPASS Authenticator [8] | Cross-platform 2FA Authenticator with TOTP & HOTP generator with sharing capabilities and password manager integration. Multiple device support, Mobile app and web access with multiple backup capabilities. | Yes | Yes | Yes | Yes | Yes | Yes | No | No | Yes | Yes | Yes | Yes | Yes |
Google Authenticator | Yes | No | No | No | Yes | Yes | No | No | No | No | No | No | No | |
Yandex Key[9] | Simple app for phones from Russian company | Yes, manually, for 1 year | No | No | No | Yes | Yes | No | No | Unknown | Unknown | Unknown | Unknown | Unknown |
IBM Security Verify | Unknown | No | No | No | Yes | Yes | No | No | Unknown | Unknown | Yes | Unknown | Unknown | |
Microsoft Authenticator | Yes | No | No | No | Yes | Yes | No | No | No | No | No | No | No | |
1Password | Cross-platform password manager[10] | Yes | Yes | Yes | Yes | Yes | Yes | No | No | No | Unknown | Unknown | Unknown | Unknown |
Authy | By Twilio, from 2015, originally Authy.[11] Previously available for Chrome.[12] | Yes | Discontinued March 19, 2024[13] | Yes | Yes | No | No | Yes | No | No | No | No | ||
Enpass[14] | Password manager by Sinew Software Systems. Syncs over multiple back-ends. | Yes | Yes | Yes | Yes | Yes | Yes | No | No | Yes | No | Yes | Unknown | No |
FreeOTP[15] | Maintained by RedHat, and based on Google Authenticator. | No | No | No | No | Yes | Yes | No | No | Yes | Yes | Yes | No | No |
oathtool [16]
|
Command-line tool for generating OTP tokens. | No | No | No | Yes | No | No | No | No | Yes | Yes | Yes | Yes | Unknown |
privacyIDEA Authenticator[17] | For use with privacyIDEA Authentication Server, with a secure enrollment process. | No | No | No | No | Yes | Yes | No | No | Yes | Yes | Yes | No | Unknown |
andOTP[18] (unmaintained)[19] | Open-source app for Android 4.4+. Compatible with Google Authenticator. | No | No | No | No | No | Yes | No | No | No | No | Yes | No | No |
Invantive Authenticator[20] | Focuses on integration with Invantive Keychain. | No | Yes | No | No | No | No | No | No | Yes | Yes | Yes | Yes | No |
LastPass Authenticator[21] | Cross-platform OTP for mobile devices with support for online backup. | Yes | No | No | No | Yes | Yes | No | No | No | No | No | No | No |
Symantec VIP | Unknown | No | No | No | Yes | Yes | No | Unknown | Unknown | Unknown | Unknown | Unknown | Unknown | |
TOTP.APP[22] | Web-based authenticator not requiring registration. | No | Yes | Yes | Yes | Yes | Yes | No | No | No | No | No | No | No |
Yubico Authenticator for Desktop[23] | By Yubico, for use with Yubikeys. | No | Yes | Yes | Yes | — | — | No | No | Yes | Yes | Yes | No | No |
Yubico Authenticator for Mobile | — | — | — | Yes | Yes | |||||||||
KeePassXC[24] | Password manager | Through user setup with Syncthing,[25] or only within the KeeWeb[26] online web App[27] | Yes | Yes | Yes | No | KeePassDX[28] | No | No | Yes | Yes | Yes | No | Yes |
2FAS[29] | Popular, feature rich open-source two-factor authenticator. No account required. | Online backup/sync via iCloud or Google Drive | Through browser extension connected to mobile app | Yes | Yes | No | No | Yes | Yes | Yes | No | No | ||
2FAuth[30] | An open-source PHP web based self-hosted OTP generator, designed for both mobile and desktop. | Yes, web based | No | No | Yes | Yes | Yes | No | Yes | |||||
totp-cli[31] | Popular, feature rich open-source two-factor authenticator. No account required. | Manually | No | No | Yes | Yes | No | No | No | Unknown | Unknown | Unknown | Unknown | Unknown |
Open Authenticator[32] | Free, open-source and multiplatform app to manage your TOTPs. | Yes, requires a subscription for more than 6 TOTPs | Yes | Yes | No | Yes | Yes | No | No | Yes | Yes | Yes | No | No |
TOTP ME[33] | Free, open-source J2ME MIDlet app to manage your TOTPs. | Manually | Using MicroEmulator app[34] | Unknown | Using J2ME Loader app[35] | Yes | Any with J2ME support or emulator | Yes | Yes | Yes | Time correction in seconds | No | ||
Hotpants[36] | Free, open-source J2ME MIDlet app to manage your TOTPs and HOTPs. | Import via scanning QR code on screen | No | No | No | No | No | Yes | No | Unknown | Unknown | Unknown | Unknown | No |
Tessera[37] | Free, open-source Qt for Symbian and desktop app to manage your TOTPs. | Unknown | Initial support for desktop | No | Could be ported | No | Symbian S60 5th Edition | Unknown | Unknown | Unknown | Unknown | Unknown |
See also
editReferences
edit- ^ "Aegis Authenticator - Secure 2FA app for Android". Aegis Authenticator. Retrieved 29 April 2023.
- ^ "Sending passwords to other users or Apple devices". Apple Support. 18 February 2021. Retrieved 23 August 2024.
{{cite web}}
: CS1 maint: url-status (link) - ^ "Set up iCloud Keychain". Apple Support. 5 August 2024. Archived from the original on 6 August 2024. Retrieved 23 August 2024.
- ^ "Set up iCloud Passwords on your Windows computer — in: iCloud for Windows User Guide". Apple Support. Retrieved 23 August 2024.
{{cite web}}
: CS1 maint: url-status (link) - ^ "Pricing for Individuals and Families | Bitwarden". Bitwarden. Retrieved 23 March 2023.
- ^ "Steam Guard TOTPs". Bitwarden. Retrieved 23 March 2023.
- ^ "Bitwarden just launched a new authenticator app. Here's what it means to users. | Bitwarden Blog". Bitwarden.
- ^ "The 5 Best Two-Factor Authentication Apps for iPhone & Android". Gadget Hacks. 28 February 2020. Retrieved 28 February 2020.
- ^ "Yandex Key - Yandex ID. Help". yandex.com. Retrieved 28 May 2024.
- ^ "Use 1Password as an authenticator for sites with two-factor authentication". 1Password. Retrieved 7 September 2018.
- ^ Lardinois, Frederic (24 February 2015). "Twilio Acquires Two-Factor Authentication Service Authy". TechCrunch. Retrieved 5 March 2018.
- ^ "Authy for Chrome App & Extension End of Life". Authy Support. Retrieved 14 February 2024.
- ^ "Business customer guide: End of Life (EOL) for use of Authy API with Twilio Authy Desktop apps". Authy Support. Retrieved 14 February 2024.
- ^ "Best password manager for iOS, Android, Windows, Linux, Mac | Enpass". www.enpass.io. Retrieved 7 September 2018.
- ^ "FreeOTP". freeotp.github.io.
- ^ "OATH Toolkit". www.nongnu.org. Retrieved 7 September 2018.
- ^ "privacyIDEA Authenticator". GitHub. Retrieved 7 September 2018.
- ^ "andOTP/andOTP". GitHub.
- ^ flocke (15 July 2017). "[Unmaintained][App][4.4+][Open source] andOTP - Open source two-factor authentication for Android". XDA Forums. Retrieved 12 March 2023.
- ^ B.V., Invantive Software. "Invantive Authenticator". two-step-verification.solutions. Retrieved 7 September 2018.
- ^ "LastPass - LastPass Authenticator". lastpass.com. Retrieved 7 September 2018.
- ^ "Online one-time password generator / TOTP (Google Authenticator) Online". totp.app. Retrieved 7 September 2018.
- ^ "Using Your YubiKey with Authenticator Codes : Yubico Support". support.yubico.com. Archived from the original on 2 October 2018. Retrieved 11 March 2023.
- ^ Team, KeePassXC. "KeePassXC 2.2.0 released - KeePassXC". keepassxc.org.
- ^ "KeePassXC + KeePassDX (Android) Sync guide. A complete starting guide for new users". reddit.com. 10 September 2021. Retrieved 7 July 2023.
- ^ "Free Password Manager Compatible with KeePass: KeeWeb". keeweb.info. Retrieved 7 July 2023.
- ^ "KeeWeb". keeweb.info. Retrieved 7 July 2023.
- ^ "KeePassDX". keepassdx.com. Retrieved 7 July 2023.
- ^ "2FA Authenticator App (2FAS)". 2FAS. Retrieved 12 March 2023.
- ^ "GitHub - Bubka/2FAuth: A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes". GitHub. Bubka. Retrieved 19 March 2023.
- ^ "Authy/Google Authenticator like TOTP CLI tool written in Go". GitHub. Retrieved 28 May 2024.
- ^ "Open Authenticator : Secure your online accounts with a free, open-source and lovely-crafted app". Skyost. Retrieved 22 July 2024.
- ^ Cacek, Josef (14 April 2024), kwart/totp-me, retrieved 12 August 2024
- ^ "totp-me - TOTP for Java ME - Google authenticator". SourceForge.
- ^ Shakarun, Nikita, nikita36078/J2ME-Loader
- ^ Matti (4 August 2024), baumschubser/hotpants, retrieved 12 August 2024
- ^ Janiszewski, Maciej (10 April 2024), ksiazkowicz/Tessera, retrieved 12 August 2024